handle username case folding in authenticated and don't throw